Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a623a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a623a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          9cIn4msY6R5kp13U684WjNz17+duByJQY8X36X8yn50=
Subject key identifier:   17:AF:0F:74:4E:87:B1:FA:C9:7E:24:E1:15:9E:91:F3:12:5C:07:71
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       16809C7B6CD64F04104AD92D8791F981EAA81360
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a623a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:29 +0000
ROA not before:           Wed 09 Jun 2021 18:04:29 +0000
ROA not after:            Wed 08 Jun 2022 18:09:29 +0000
asID:                     28260
IP address blocks:        2804:28e4:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:80:9c:7b:6c:d6:4f:04:10:4a:d9:2d:87:91:f9:81:ea:a8:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:29 2021 GMT
            Not After : Jun  8 18:09:29 2022 GMT
        Subject: CN=3082010A0282010100E5A782509B7333592DE7783BF2E084C378B95CB2DAC3DD5496725CC5AE3D168DBD349C74E90B7C764CEBA4FF587E674F67CFCC6C7D082054753927C151761B5AB644D89060C15EE461E4AC4FDC2A47E1F256EDEEDDAAE205D9C9B90A40A7C3090C0E4AC93F7FE647C0CFA59D37D13D8E3625F92A06019D3E39DDDDD9E4099A822317D421BDB572BF35B7B4D60B1DC75D4D0BED1B15044CC73F2F88ED3497175D0590A8DABBC62ADEB94A8610A8E8589677A7B13A35933129E9CD523DC7A9A29ED93940627BE526D9664FA3234560C4D9B920FC90BC5D709B094EF6D3DDC7FD064A0D186AF2131E3076F4D42794C79B748A3871028BF20EA5651898D497DEFA190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:82:50:9b:73:33:59:2d:e7:78:3b:f2:e0:
                    84:c3:78:b9:5c:b2:da:c3:dd:54:96:72:5c:c5:ae:
                    3d:16:8d:bd:34:9c:74:e9:0b:7c:76:4c:eb:a4:ff:
                    58:7e:67:4f:67:cf:cc:6c:7d:08:20:54:75:39:27:
                    c1:51:76:1b:5a:b6:44:d8:90:60:c1:5e:e4:61:e4:
                    ac:4f:dc:2a:47:e1:f2:56:ed:ee:dd:aa:e2:05:d9:
                    c9:b9:0a:40:a7:c3:09:0c:0e:4a:c9:3f:7f:e6:47:
                    c0:cf:a5:9d:37:d1:3d:8e:36:25:f9:2a:06:01:9d:
                    3e:39:dd:dd:d9:e4:09:9a:82:23:17:d4:21:bd:b5:
                    72:bf:35:b7:b4:d6:0b:1d:c7:5d:4d:0b:ed:1b:15:
                    04:4c:c7:3f:2f:88:ed:34:97:17:5d:05:90:a8:da:
                    bb:c6:2a:de:b9:4a:86:10:a8:e8:58:96:77:a7:b1:
                    3a:35:93:31:29:e9:cd:52:3d:c7:a9:a2:9e:d9:39:
                    40:62:7b:e5:26:d9:66:4f:a3:23:45:60:c4:d9:b9:
                    20:fc:90:bc:5d:70:9b:09:4e:f6:d3:dd:c7:fd:06:
                    4a:0d:18:6a:f2:13:1e:30:76:f4:d4:27:94:c7:9b:
                    74:8a:38:71:02:8b:f2:0e:a5:65:18:98:d4:97:de:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:0F:74:4E:87:B1:FA:C9:7E:24:E1:15:9E:91:F3:12:5C:07:71
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a623a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:f4:91:e4:a8:81:17:8d:d8:34:cf:f9:d9:3a:13:a4:74:
         87:19:af:51:48:7f:5c:f0:45:d7:78:59:aa:65:44:34:ce:5d:
         88:02:a0:97:33:72:e9:19:9c:77:69:00:29:b2:04:ca:c8:99:
         92:a0:4a:c9:14:5c:ca:99:4c:3c:a3:3d:41:14:ee:f5:91:00:
         74:28:cf:ad:e2:ae:12:d8:d0:25:43:f2:4e:f0:a8:cf:12:ce:
         62:d1:db:32:70:df:6f:9c:ad:51:25:5c:20:a6:6c:34:a6:8f:
         b9:5d:80:f1:19:9e:5c:42:d0:9b:b9:72:3f:b5:cf:12:ba:e0:
         dd:0e:de:8b:44:9b:ef:ba:1f:3c:2d:d4:6a:0b:ee:ec:46:23:
         66:a8:49:46:c7:4f:5e:d7:3f:ff:ab:8f:bd:de:34:03:de:f7:
         39:43:22:02:e4:5f:2f:3a:b0:65:ca:41:f6:ae:42:d3:19:31:
         93:14:71:77:3d:19:69:69:e3:3d:7b:a1:0d:62:38:c7:72:d4:
         d1:b6:73:8c:26:06:79:df:e1:35:0c:3c:1b:92:88:62:2f:7e:
         51:a8:09:7c:24:d9:2c:21:f4:c3:78:66:8e:cc:23:7f:20:f6:
         00:c9:aa:c4:df:1f:e9:a3:cf:ed:f3:35:ee:d7:6b:99:d4:f8:
         bf:23:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org